部署Web应用至AWS虚拟机时遭遇CORS策略错误的解决求助

我最近尝试把自己的Web应用部署到AWS虚拟机上，先创建好VM，接着安装了Tomcat，结果部署后在Chrome开发者工具里碰到了这个CORS错误：

Access to XMLHttpRequest at 'http://localhost:8080' from origin 'http://' has been blocked by CORS policy: The request client is not a secure context and the resource is in more-private address space local.

我试过用Chrome的Allow-CORS扩展，但完全没起作用！另外我也给API手动加了这些响应头，可还是遇到同样的问题：

response.setHeader("Access-Control-Allow-Origin", "*");
response.setHeader("Access-Control-Allow-Headers", "Origin, Content-Type, Accept, Authorization");
response.setHeader("Access-Control-Allow-Credentials", "true");
response.setHeader("Access-Control-Allow-Methods", "GET, POST, PUT, DELETE, OPTIONS, HEAD");

有没有大佬能给点可行的解决建议呀？

备注：内容来源于stack exchange，提问作者Chayma Jebri